Access Engineer & IAM Auditor

Requirements

• 2+ years in Access Engineering or IAM Audit roleMust
• GCP IAM hands-on experience including roles, permissions, service accounts, org policiesMust
• LDAP hands-on experienceMust
• Privileged Access Management (PAM) tools hands-on experienceMust
• Intermediate level English proficiency in written and spoken communicationMust
• Compliance frameworks such as ISO 27001, SOC 2, NIST

What you'll do

• Design and build access audit processes from scratch
• Establish standardized access audit framework with methodology, cadence, evidence collection, and reporting templates
• Define risk-based audit scope and sampling methodology for large, complex multi-system landscapes
• Run regular and ad-hoc access audits across environment including privileged and administrative accounts
• Audit GCP IAM, LDAP, and PAM tools for stale accounts, excessive permissions, orphaned access, and misconfigurations
• Prepare clear, audit-ready reports and evidence packages for internal review and external auditors
• Track remediation actions with system and application owners through to closure
• Maintain audit documentation and process runbooks for repeatability and continuity
• Refine audit methodology based on findings, tooling changes, and evolving compliance requirements

Keywords

About the role

Growe welcomes those who are excited to: • Design and establish a standardized access audit framework, including methodology, cadence, evidence collection, and reporting templates; • Define risk-based audit scope and sampling methodology appropriate for a large, complex, multi-system landscape; • Run regular (scheduled/periodic) and ad-hoc access audits across the environment, including privileged and administrative accounts; • Audit GCP IAM, LDAP, and PAM tools for stale accounts, excessive permissions, orphaned access, and misconfigurations; • Prepare clear, audit-ready reports and evidence packages suitable for internal review and external auditors; • Track remediation actions with system and application owners through to closure, escalating overdue items as needed; • Maintain audit documentation and process runbooks to ensure repeatability and continuity; • Continuously refine the audit methodology based on findings, tooling changes, and evolving compliance requirements. We need your professional experience: • 2+ years in the position of Access Engineer/IAM Auditor or similar; • Experience designing and building an access audit process from scratch; • Hands-on experience with GCP/LDAP (roles, permissions, service accounts, org policies); • Hands-on experience with Privileged Access Management (PAM) tools and privileged/admin account audits; • Experience working across IGA tools (e.g., One Identity, Okta, Entra ID, Keycloak); • Familiarity with compliance frameworks such as ISO 27001, SOC 2, and NIST; • At least Intermediate level of English (written and spoken). We appreciate if you have those personal features: • Strong team-player orientation with the ability to maintain a positive and constructive atmosphere within the team; • High reliability and consistency in delivering work to a high standard of accuracy and attention to detail; • Self-dependent, result-oriented mindset; • A growth mindset - comfortable acknowledging mistakes, learning from them, and implementing corrective measures to prevent recurrence. We are seeking those who align with our core values: • GROWE TOGETHER: Our team is our main asset. We work together and support each other to achieve our common goals; • DRIVE RESULT OVER PROCESS: We set ambitious, clear, measurable goals in line with our strategy and driving Growe to success; • BE READY FOR CHANGE: We see challenges as opportunities to grow and evolve. We adapt today to win tomorrow. Originally posted on Himalayas